2843 matches found
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Code injection
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20952
CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...
CVE-2018-20946
cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2016-10819: Insertion of Sensitive Information into Log File
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
PT-2019-10388
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.27 Description The issue arises from the creation of world-readable files during the use of the WHM Apache Includes Editor. Recommendations For versions prior to 68.0.27, update to version 68.0.27 or later to...
PT-2019-7615
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue affects user log files in cPanel, making them world-readable when rotated by cpanellogd. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resol...
CVE-2018-20952: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
PT-2019-10381
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read zone information due to a world-readable archive created by the archive sync zones script. Recommendations: For versions prior to 68.0.27, update to version...
CVE-2018-20946: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2019-14395
cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log SEC-494...
CVE-2019-14395
CVE-2019-14395 affects cPanel before 80.0.5, where the Queueprocd log used world-readable permissions, enabling potential information disclosure. Root cause: improper file permissions on the log, leading to exposure of sensitive data. Remediation: upgrade to cPanel 80.0.5 or later (as per vendor ...
PT-2019-13664
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue concerns the use of world-readable permissions for the Queueprocd log. Recommendations For versions prior to 80.0.5, update to version 80.0.5 or later to resolve the issue...